Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253161	4.3	警告	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0893	2010-05-14 18:42	2010-04-13	Show	GitHub Exploit DB Packet Storm

253162	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-20 不適切な入力確認	CVE-2010-0453	2010-05-14 18:42	2010-02-3	Show	GitHub Exploit DB Packet Storm

253163	4.9	警告	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0889	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253164	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Management Center コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0891	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253165	5.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Access Manager コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0894	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253166	6.8	警告	オラクル	-	Oracle Sun Product Suite の Sun Java System Communications Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0885	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253167	7.1	危険	オラクル	-	Oracle Sun Product Suite の Sun Convergence コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0896	2010-05-14 18:41	2010-04-13	Show	GitHub Exploit DB Packet Storm

253168	7.2	危険	サン・マイクロシステムズオラクル	-	Oracle Sun Product Suite の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0882	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253169	7.5	危険	オラクル	-	Oracle Sun Product Suite の Sun Java System Directory Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0897	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

253170	10	危険	オラクル	-	Oracle Sun Product Suite の Sun Ray Server Software コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0888	2010-05-14 18:40	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212601	8.8	HIGH Network	feifeicms	feifeicms	FeiFeiCms 4.0.181010 on Windows allows remote attackers to read or delete arbitrary files via index.php?s=Admin-Data-Down-id-..\ or index.php?s=Admin-Data-Del-id-..\ directory traversal.	CWE-22 Path Traversal	CVE-2019-8412	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212602	7.5	HIGH Network	zzcms	zzcms	admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.	CWE-22 Path Traversal	CVE-2019-8411	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212603	4.9	MEDIUM Network	onefilecms	onefilecms	OneFileCMS 3.6.13 allows remote attackers to modify onefilecms.php by clicking the Copy button twice.	NVD-CWE-noinfo	CVE-2019-8408	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212604	6.5	MEDIUM Network	hongcms_project	hongcms	HongCMS 3.0.0 allows arbitrary file read and write operations via a ../ in the filename parameter to the admin/index.php/language/edit URI.	CWE-22 Path Traversal	CVE-2019-8407	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212605	9.8	CRITICAL Network	hotels_server_project	hotels_server	Hotels_Server through 2018-11-05 has SQL Injection via the API because the controller/api/login.php telephone parameter is mishandled.	CWE-89 SQL Injection	CVE-2019-8393	2024-11-21 13:49	2019-02-18	Show	GitHub Exploit DB Packet Storm

212606	6.1	MEDIUM Network	ory	hydra	ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.	CWE-79 Cross-site Scripting	CVE-2019-8400	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212607	6.5	MEDIUM Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.	CWE-125 Out-of-bounds Read	CVE-2019-8398	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212608	6.5	MEDIUM Network	hdfgroup	hdf5	An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.	CWE-125 Out-of-bounds Read	CVE-2019-8397	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212609	6.5	MEDIUM Network	hdfgroup	hdf5	A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while rep…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2019-8396	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

212610	9.8	CRITICAL Network	zohocorp	manageengine_servicedesk_plus	An Insecure Direct Object Reference (IDOR) vulnerability exists in Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10007 via an attachment to a request.	CWE-22 CWE-706 Path Traversal Use of Incorrectly-Resolved Name or Reference	CVE-2019-8395	2024-11-21 13:49	2019-02-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed